Description of problem:
The nss_compat NSS module only supports NIS and NIS+ as the source for
expanding "+" and "-" lines in the password file. We are using a global account
database based on Active Directory (through nss_ldap). This limitation of
nss_compat doesn't allow us to use it.
How reproducible:
The following configuration in /etc/nsswitch.conf is not supported:
passwd: compat ldap
passwd_compat: ldap